Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
File:                     r_zmN5iBZebFG_v-vRKD1REkAZA.mft (raw, json)
Hash identifier:          5IRh1aUktyd/2ofbMxNtUzAbC0ArbIsObtfp4BKPDNU=
Subject key identifier:   E9:1B:3E:6D:0B:E3:9C:16:D1:4A:40:7A:27:33:55:3F:1B:0F:64:B8
Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
Certificate issuer:       /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
Manifest number:          01FB
Signing time:             Thu 23 Jul 2026 04:37:15 +0000
Manifest this update:     Thu 23 Jul 2026 04:37:14 +0000
Manifest next update:     Thu 30 Jul 2026 04:37:14 +0000
Files and hashes:         1: r_zmN5iBZebFG_v-vRKD1REkAZA.crl (hash: UH/lGAahIGhaJ3mvIIihOVO921j/zJQN6G8wqxMOm7M=)
                          2: C608133C226F11EF8D24AD63C4F9AE02.roa (hash: ySADP91L9zzRBTSfDoHJ50+Ik7XzeYcUmFcCyfVbDoY=)
                          3: C531DD12226F11EF8D24AD63C4F9AE02.roa (hash: 4apUkb/9OAkWGMu7J3h8tdbWlfEZR8ZKAMbBcPjKoaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
                          rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
        Validity
            Not Before: Jul 23 04:37:14 2026 GMT
            Not After : Jul 30 04:37:14 2026 GMT
        Subject: CN=6a619a7a-e98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:51:bc:1b:50:05:01:30:5e:04:c1:6b:4b:
                    27:d8:a8:01:10:e4:1e:f8:34:de:5c:f2:6d:a3:ac:
                    0e:75:7a:ab:d7:af:02:6d:50:dc:cc:95:b9:54:77:
                    21:ae:65:39:30:eb:8a:d9:cb:68:4b:7b:7b:fd:5f:
                    08:7c:a0:32:8f:ce:ee:30:02:50:b9:fa:f6:90:6f:
                    fe:ef:d5:3c:4c:4e:ce:5f:ee:b1:8e:b1:72:d8:b3:
                    1a:28:a1:ba:60:a0:ef:bf:5b:76:e9:a4:50:90:16:
                    c0:31:67:d8:bc:9b:1e:3f:c9:bf:e8:df:cb:7f:38:
                    69:db:bc:4b:58:fa:24:66:46:78:e4:9c:3c:2d:0c:
                    28:10:1a:ba:ec:9e:df:c8:59:59:ba:73:ee:72:4a:
                    1e:56:5a:dd:fd:46:37:68:d9:91:2b:07:30:52:1f:
                    f7:3e:b3:c6:bf:c9:0d:e8:73:81:0f:aa:bd:76:d2:
                    86:c8:0f:12:e7:e6:5e:f5:2b:1b:b7:64:87:8b:e5:
                    2e:ac:e0:37:f5:65:3a:64:02:d5:5b:80:cd:d6:10:
                    e7:14:1f:a0:93:9e:34:52:2e:9d:88:f9:7b:67:bc:
                    3a:ad:95:76:d7:41:1d:66:e7:a2:97:fc:bc:42:28:
                    f0:81:98:11:7d:3e:f0:8b:79:11:29:51:df:f6:ba:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1B:3E:6D:0B:E3:9C:16:D1:4A:40:7A:27:33:55:3F:1B:0F:64:B8
            X509v3 Authority Key Identifier:
                keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:53:78:ee:a1:4e:c2:8a:0b:1f:e9:bf:5a:53:52:dd:cb:61:
         bc:d3:e5:8b:51:6a:28:aa:53:75:69:7f:b2:f5:64:43:84:01:
         d1:aa:2e:11:5f:c7:29:b1:6d:5f:7a:cf:f9:ec:46:5c:8b:22:
         b5:3c:9c:3c:2a:e1:02:28:f2:99:d4:53:ba:eb:9b:07:e1:44:
         15:a6:8d:05:5b:41:a2:98:e1:7e:43:af:ac:af:cf:64:6c:42:
         fc:2e:40:9a:bd:00:c3:91:c8:9e:c0:4f:76:74:17:4e:c1:65:
         08:3f:0d:97:a6:e9:53:76:56:1d:d4:18:f9:d2:44:e2:ac:f0:
         e7:19:88:43:85:2d:c7:92:61:36:3a:7c:43:0d:13:fe:44:6e:
         77:00:b6:31:61:48:c0:1c:3e:b8:d1:8d:33:54:41:49:51:50:
         7c:bc:81:54:d4:e8:e7:39:63:dc:38:c9:44:bb:cd:0d:bd:1b:
         7f:16:28:c6:6b:4f:ca:bb:2b:84:86:b0:57:a2:a0:2b:22:00:
         a9:34:86:ac:b0:a2:8c:69:b7:50:0d:b1:68:2a:ed:2a:80:11:
         34:3c:62:bd:9f:48:56:32:bf:cc:14:c8:56:1a:55:a3:fc:0c:
         36:b6:d5:37:11:e3:ca:e5:2c:cf:2d:b7:70:61:ae:c1:14:80:
         3b:ad:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:24 2026 by rpki-client